ci(deps): group Dependabot updates by devDeps vs prod deps (#12890)

Signed-off-by: Anton Gilgur <agilgur5@gmail.com>
argoproj · May 2, 2024 · 6ea4420 · 6ea4420
1 parent ed55b02
commit 6ea4420
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -23,6 +23,14 @@ updates:
     schedule:
       interval: "weekly"
       day: "saturday"
+    # split devDeps and prod deps as typically only prod deps need security backports
+    groups:
+      devDeps:
+        applies-to: security-updates
+        dependency-type: "development"
+      deps:
+        applies-to: security-updates
+        dependency-type: "production"
     ignore:
       - dependency-name: raw-loader
       - dependency-name: style-loader